Accounting Stop Packets Dropping

[shahnawazmir]

I am using AS5300 and my NAS is dropping stop packets.Radius server is located at remote location connected through radio link.Please help for solving this problem.

aaa new-model

aaa group server radius rkt

server 1.2.3.4 auth-port 1645 acct-port 1646

!

aaa authentication login default local group radius

aaa authentication login CONSOLE local

aaa authentication ppp default if-needed group radius local

aaa authentication ppp Dialin-Users group radius

aaa authorization network default group radius

aaa accounting network default start-stop group radius

[tepatel]

Need to know that the NAR is "only" dropping the sccouting stop packets?

does that mean that "start" packets are generated and sent to radius server ok? Pl. explain more about that dropping..does that mean that nas is not generating it OR the stop packets are not making to the radius server and lost in the transit.

Issue "debug aaa accounting" and "debug radius" to see NAS is generating the start and stop packets or not.

[shahnawazmir]

Thankx for your response.What is actually happening is users come and they are authenticated and when any one of users is dropped or disconnects its info is not updated on RADIUS and he remains han ged there and no one else is allowed to authenticate. For this we do remove hanged user from radius and remove users from NAS too. Plz help.

[sghosh]

In that case, do a "debug radius" and "debug aaa accounting" after the user disconnects and see if the radius stop packet is generated or not and if it being received by radius server.

You should be able to see Acct-request and Acct-response.

RADIUS(00000302): Send Accounting-Request to 171.69.89.25:1646 id 21645/1, len 92

RADIUS: authenticator 94 99 9E 19 B9 DD AF F7 - 8E B1 01 A6 41 76 CA 14

RADIUS: Acct-Session-Id [44] 10 "00000302"

RADIUS: Acct-Authentic [45] 6 Local [2]

RADIUS: User-Name [1] 7 "cisco"

RADIUS: Acct-Status-Type [40] 6 Start [1]

RADIUS: NAS-Port [5] 6 66

RADIUS: NAS-Port-Type [61] 6 Virtual [5]

RADIUS: Calling-Station-Id [31] 13 "10.21.83.50"

RADIUS: Service-Type [6] 6 NAS Prompt [7]

RADIUS: NAS-IP-Address [4] 6 172.16.171.28

RADIUS: Acct-Delay-Time [41] 6 0

RADIUS: Received from id 21645/1 171.69.89.25:1646, Accounting-response, len 20

RADIUS: authenticator 67 3D 56 97 9B FB 03 7A - 94 74 51 32 FA 27 53 C8